u-link_Technical_ User_ Guide_v_1_3_4_7_

coronahgcontrol 8 views 102 slides Sep 06, 2024
Slide 1
Slide 1 of 102
Slide 1
1
Slide 2
2
Slide 3
3
Slide 4
4
Slide 5
5
Slide 6
6
Slide 7
7
Slide 8
8
Slide 9
9
Slide 10
10
Slide 11
11
Slide 12
12
Slide 13
13
Slide 14
14
Slide 15
15
Slide 16
16
Slide 17
17
Slide 18
18
Slide 19
19
Slide 20
20
Slide 21
21
Slide 22
22
Slide 23
23
Slide 24
24
Slide 25
25
Slide 26
26
Slide 27
27
Slide 28
28
Slide 29
29
Slide 30
30
Slide 31
31
Slide 32
32
Slide 33
33
Slide 34
34
Slide 35
35
Slide 36
36
Slide 37
37
Slide 38
38
Slide 39
39
Slide 40
40
Slide 41
41
Slide 42
42
Slide 43
43
Slide 44
44
Slide 45
45
Slide 46
46
Slide 47
47
Slide 48
48
Slide 49
49
Slide 50
50
Slide 51
51
Slide 52
52
Slide 53
53
Slide 54
54
Slide 55
55
Slide 56
56
Slide 57
57
Slide 58
58
Slide 59
59
Slide 60
60
Slide 61
61
Slide 62
62
Slide 63
63
Slide 64
64
Slide 65
65
Slide 66
66
Slide 67
67
Slide 68
68
Slide 69
69
Slide 70
70
Slide 71
71
Slide 72
72
Slide 73
73
Slide 74
74
Slide 75
75
Slide 76
76
Slide 77
77
Slide 78
78
Slide 79
79
Slide 80
80
Slide 81
81
Slide 82
82
Slide 83
83
Slide 84
84
Slide 85
85
Slide 86
86
Slide 87
87
Slide 88
88
Slide 89
89
Slide 90
90
Slide 91
91
Slide 92
92
Slide 93
93
Slide 94
94
Slide 95
95
Slide 96
96
Slide 97
97
Slide 98
98
Slide 99
99
Slide 100
100
Slide 101
101
Slide 102
102

About This Presentation

u-link remote access service


Slide Content

u-link Remote Access Service
Technical User Guide
Version 1.5.3
January2022

Page 2
Legal notice
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Copyright Notice
Copyright ©2022 Weidmüller Interface GmbH & Co. KG
All rights reserved.
Reproduction without permission is prohibited.
Disclaimer
Information in this document is subject to change without notice and does not represent a commitment on thepart of
Weidmüller.
Weidmüllerprovides this document "as is," without warranty of any kind, either expressed or implied, including, but not limited
to, its particular purpose. Weidmüllerreserves the right to make improvements and/or changes to this manual, or to the
products and/or the programs described in this manual, at any time.
Information provided in this manual is intended to be accurate and reliable. However, Weidmüllerassumes no responsibility for
its use, or for any infringements on the rights of third parties that may result from its use.
This product might include unintentional technical or typographical errors. Changes are periodically made to the information
herein to correct such errors, and these changes are incorporated into new editions of the publication.
Contact Information
WeidmüllerInterface GmbH & Co. KG
PO box 3030
32760 Detmold
Klingenbergstrasse16
32758 Detmold
Germany
Phone +49 (0) 5231 14-0
Fax +49 (0) 5231 14-2083
E-Mail [email protected]
Internet www.weidmueller.com

Table of Contents Page
Chapter 1 –Overview u-link Remote Access Service 4Link
Chapter 2 –Starting with u-link / Registration of a new u-link system account 10Link
Chapter 3 –Overview features and functions of u-link Web portal 15Link
Chapter 4 –Setup of a remote access scenario (Example) 23Link
Chapter 5 –Initiating a remote access to remote LAN devices 64Link
Chapter 6 –Further functionality of u-link 73Link
Chapter 7 –Standard Functions -Further functionality in Standard Version79Link
Appendix
1 –Registration of Router to u-link failed (How to solve) 92Link
2 –General support in case of Router problem issues 95Link
3 –Functional diagram of u-link 96Link
4 –Internet connection requirements of u-link VPN clients (Service PC / Router)97Link
5 –Activating / de-activating Router VPN connection by digital input98Link
6 –How to change Router LAN-IP address/netmask via u-link VPN connection 99Link
7–Technical u-link support 102Link
V1.5.3 / Jan, 2022 Page 3Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
u-link -Technical User Guide

Chapter 1: Overview u-link Remote Access Service
1.1General information
1.2How u-link is working / Involved components
1.3Features of Entry Version (free of charge)
1.4Features of chargeable Standard Versions
1.5Link to buyable u-link licenses
V1.5.3 / Jan, 2022 Page 4Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Chapter 1 –Overview u-link Remote Access Service

V1.5.3 / Jan, 2022 Page 5Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
▪The Weidmüller u-link Remote Access Service allows an easy and secure access of Service
PCs to remote local Ethernet networks via the Internet.
▪The VPN-based access of a Service PC to remote networks will be provided by the web-based
u-link Portal service (VPN server) and a Weidmüller Router (VPN client) located
in a remote target network.
▪The u-link VPN server is used as a meeting point and connects a Service PC to
a Router (both running as VPN clients) to allow an encrypted data communication
between the PC and remote Ethernet devices connected to the LAN port of the
Router.
▪Using the u-link VPN server as public accessible meeting point both a Service PC
and a Router only need to establish an outgoing VPN connection to the Internet
which usually is allowed and compliant to IT security requirements.
▪For secure data integrity the u-link Remote Access Service uses for each u-link system account
its own server and database instances (secure separation of u-link accounts).
▪The data communication between an account specific u-link VPN server and remote clients
(Service PCs and Router) is based on a certificate-secured OpenVPN communication
(Encryption RSA 2048, x509 certificates).
▪Based on customer requirements the u-link Remote Access Service is offered with following
variants:
▪Entry Version(free of charge, no time limitation of use)
▪Versions Standard 150/300/500/ and more(Extended features, buyable use license, 1 year
license validity)
▪When using a “Standard Version” additional VPN licensescan be purchased to use more
than 3 simultaneous VPN pass-through connections of a Service PC to a remote
router/network.
Chapter 1 –Overview u-link Remote Access Service
1.1 General information

V1.5.3 / Jan, 2022 Page 6Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
The u-link Remote Access Service consistsofthe3 components…
▪Web accessible u-link Portal serversto manage the customer specific account.
−Device configuration representing the real devices located in the field.
−User configuration representing the Service PCs which do a remote access.
−Providing the VPN based pass-through connection between a Service PC and a
Router / Remote network.
▪Main u-link components: Web server (Portal access), VPN server, Database server
and the WWH server (world wide heartbeat).
▪By creating/registering an u-link system account for each account the Portal server
instances will be created exclusively.
▪Windows-based PC
▪Uses Software ‘u-link VPN client’ for secure communication with remote devices via
the u-link VPN server.
▪Browser based access to u-link Portal to select the target devices for remote access.
▪Currently MS Windows versions 7, 8, and 10 are supported.
▪WeidmüllerRouterlocated in the remote network providing the access to connected
devices at LAN port.
▪Useable models: All Weidmüller Router variantsexceptmodel E-SR-2GT-LAN-FN(for
routing/NAT/securityapplications, doesnot support VPN)
▪u-link is supported from firmware version 3.0.2 (Update downloadable).
▪Routers already installed in Security/Firewall applications can be extended to use
u-link additionally.
Chapter 1 –Overview u-link Remote Access Service
1.2How the u-link Remote Access Service is working / Involved hard and
software componentsFactory network
Machine network
IP-Device 1
IP-Device 2
IP-Device l
Weidmüller Industrial
Security Router
Internet

V1.5.3 / Jan, 2022 Page 7Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
General features
▪Can be used free of charge, no time limitation of use
▪Maximum 50 Router objects configurable (Access points
to a remote network)
▪No limit on the number of configurable service users
▪2 VPN pass-through connections (Service PC →u-link
VPN server →Router/Remote network) simultaneously
usable.
▪Bandwidth of VPN connection (calculated on total data
volume of a system account)
▪max. 500 kBit/sec for data volume <= 1 GB/Month
(not guaranteed)
▪max. 64 kBit/sec for data volume > 1 GB/Month
▪No guaranteed system availability
Chapter 1 –Overview u-link Remote Access Service
1.3 Features of Entry Version (free of charge)
Functional features
▪Device Management (Router/Device configuration representing the remote accessible devices)
▪Device topology can only be designed as a flat structure (All Router objects directly are arrangedamongthe root container).
▪User Management (Administration of Service users)
▪Each defined service user has access to any configured object (Router/Remote network devices)
▪Each created user is member of default “Service group” with pre-defined user permissions (not changeable)
▪Administrator has full featured access, service users may maintain the Device management (no User Management).
Sample screenshot of a flat Device
topology.
All Router objects (Entry version)
always are arranged directly below
the root container.
All configured objects (Routers and
user-defined Ethernet devices) are
visible and accessible for each
Service user.

V1.5.3 / Jan, 2022 Page 8Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Variants
▪Standard Versions having following extended features related
to the Entry Version:
▪Standard 150: Maximum 150 Router objects configurable
(Access points to a remote network)
▪Standard 300: Maximum 300 Router objects configurable
▪Standard 500: Maximum 500 Router objects configurable
▪Standard more: As many Router objects configurable as
the customer needs
▪To use a standard version a usage license has to be
purchased having 1 year license validity.
▪Upgrading from a lower version or extension of validity of a
running version easily can be done by entering the
purchased license key in Account Management by Account
Administrator
1.4 Features of chargeable Standard Versions
Chapter 1 –Overview u-link Remote Access Service
General features of all Standard versions
▪3 VPN pass-through connections (Service PC →u-link VPN server →Router/Remote network) simultaneously usable
▪Optional use of additional simultaneously VPN pass-through connections (buyable license key)
▪Remote device topology can be organized by a tree-like structure (Locations, Groups, definablecontainerobjects)
▪Group-based organization of service users with different permissions allows a selected access to device topology objects
▪Advanced reporting and statistical information
▪Bandwidth VPN connections (calculated on total data volume of a system account)
▪1 Mbit/sec for each VPN tunnel up to a monthly data volume of 5 GB (guaranteed)
▪500 kBit/sec for each VPN tunnel if the monthly data volume exceeds 5 GB
▪Additional 1 GB/Month at 1 Mbit/sec per additional purchased VPN connection
▪General bandwidth limitation of all VPN connections to 500 kBit/s if the monthly data volume exceeds 12GB
▪System availability: ≥ 99,6%
Sample screenshot of a complex
Device topology.
It is organized in hierarchical sub-
structures (Locations /Groups)
representing the real field
applications.
The visibility and accessibility of
configured objects (Locations,
Groups, Routers and user-defined
Ethernet devices) can be
individually configured for Service
users by user groups.

V1.5.3 / Jan, 2022 Page 9Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
1.5 Link to buyable u-link licenses
▪For detailed information about
available license types please check
the Weidmüller product catalogue.
➢Open www.weidmueller.com
➢Select ‘Product Catalogue’
➢Select ‘Active Industrial Ethernet’
➢Then select section ‘u-link Licences’
in product group overview
Chapter 1 –Overview u-link Remote Access Service
Hyperlink to u-link licenses
(Weidmüllerproduct catalogue)

Chapter 2: Starting with u-link
2.1 Registration of a new u-link system account
V1.5.3 / Jan, 2022 Page 10Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Chapter 2 –Starting with u-link / Registration of a new u-link system account

Page 11
Open u-link Web page (Step 1)
➢Open a browser and enter u-link.weidmueller.com.
➢Click button ‘Register’.
Starting the registration process (Step 2)
➢Enter your registration data.
➢Click button “Next”.
Notes:
▪This user will be the administrator of the u-link system
account. Also this user can be used for remote access
service.
▪The mail address will be used for logon to the u-link
account and must be unique in the global u-link system.
▪The mail address must be existent because after
registration a verification mail will be sent to the entered
address.
▪The entered password has to be used for logon to the
u-link Portal after successful registration.
Select language (English/German)
Chapter 2 –Starting with u-link / Registration of a new u-link system account
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
If you register a new u-link account
you automatically will have the
‘Entry Version’.
V1.5.3 / Jan, 2022
2.1 Registration of a new u-link system account

Page 12
Registration process (Step 3)
➢Set checkbox that you agree to the “General u-link
terms and conditions”.
➢Enter for security reasons the captchacharacters
displayed as graphical image.
➢Click button “Next”.
Registration process (Step 4)
▪An information will be displayed that your u-link account
successfully has been created but it is not yet activated
▪You now will now receive a mail containing a hyperlink
to verify and activate your u-link account.
▪When clicking button “Next” the u-link Login page will be
displayed.
▪Before your first login you need to activate your
account via verification mail (Check your mailbox).
Chapter 2 –Starting with u-link / Registration of a new u-link system account
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
2.1 Registration of a new u-link system account

Page 13
Registration process (Step 5)
➢Open your received mail
“Registration system account”.
➢Click on hyperlink “Verifying
system account”.
Hyperlink to verify and activate the
registered u-link system account.
Chapter 2 –Starting with u-link / Registration of a new u-link system account
Registration process (Step 6)
▪Now your standard browser will
be opened displaying the
information that your u-link
successfully was activated.
▪Additionally you will receive a
second mail named “Registration
Administrator” containing
information about your user data
(being the u-link administrator of
the registered account).
Example of a
verification mail
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
2.1 Registration of a new u-link system account

Page 14
Registration process (Step 7)
➢Check your mailbox regarding
the mail “Registration
Administrator”.
▪This mail contains some
information about your entered
registration data and how to
logon to the u-link Web portal.
▪Additionally it contains the
“Activation code” to register /
unlock the software “u-link VPN
client” using this account for
remote access.
Activation code to assign
(register) software “u-link
VPN client” to this user
account.
Note: The activation code
can be retrieved –when
logged on to the u-link portal
with this user account –in
menu “User Profile / Tab
Activation code”.
Registration process is
finished after receiving this
mail!
▪Now you can logon to your u-link
account via web page
u-link.weidmueller.comusing
your registered mail address and
entered password.
Chapter 2 –Starting with u-link / Registration of a new u-link system account
Example of mail “Registration
Administrator” which informs
you that your system account
now is active and that this
user account is the
Administrator.
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
2.1 Registration of a new u-link system account

V1.5.3 / Jan, 2022 Page 15Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Chapter 3 –Overview features and functions of u-link Web portal
Chapter 3: Overview features and functions of u-link Web portal
3.1u-link Login page
3.2Menu News & Downloads
3.3Menu User Profile
3.4Menu Service Desk
3.5Menu User Management
3.6Menu Device Management
3.7Menu Account Management

Page 16
▪For logon to the u-link Web portal any
standard browser is supported.
➢Open a browser and enter
u-link.weidmueller.com
➢Login with user name (Mail address) and
password of the account creator (is
automatically the Administrator).
3.1 u-link Login page
Chapter 3 –Overview features and functions of u-link Web portal
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 17
▪After successful login the menu “News &
Downloads” automatically is opened
(Home page).
▪This page is separated into the 3
sections:
▪“Your profile”→Contains
information about the data of the
logged-on user.
▪“News from your administrator”→
Here any text information can be
provided by the local administrator of
this account to all other users of this
account (Button “Add news”). This
text is seen by all users of this u-link
system account.
▪“News and Downloads from the u-
link global administration team
(Weidmüller)”→Here the
Weidmüller u-link administration team
is providing data (any information,
downloads, documents) to all u-link
users of all u-link accounts.
Current license is always the ‘Entry
Version’ after registration.
Logged-on user
3.2 Menu ‘News & Downloads’(Initial state after registration)
Chapter 3 –Overview features and functions of u-link Web portal
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Please check this
section periodically
regarding new
information, software
updates and
documentation.
Each created u-link
user can see this Web
page after login.
The section ‘News from
your administrator’ only
can be maintained by
the administrator.

Page 18
▪Tab ‘User data’
•Show / Edit the data of logged-on user
•Change Password
•Select default language when logged on
•Select default Home page when logged on
Note:Group membership and User permissions cannot be
changed in the Entry-Version. The system account creator
automatically is member of group ‘Administrators’, additionally
created users automatically become members of group ‘Service’.
▪Tab ‘Status Information’
•Shows several date and time values for information
▪Tab ‘Activation Code’
•Activation code:Shows the activation key which this user has
to use to register/unlock the PC software “u-link VPN Client”.
•State:Has value “Not used” as long as the u-link VPN Client
never has initiated a VPN connection to u-link.
Has value “In Use” after first establishing a VPN
connection to u-link.
•Release for additional activation:If state is ‘In Use’ and if you
want to release a secondPC as u-link VPN Client using this
activation code you first must enable the checkbox.
Note 1: Checkbox first can be set if state is ‘In Use’!
Note 2: If you release several Service PCs with the same
activation code (all are clones from the perspective of the VPN
server) be aware that you do not start the VPN connection on
these PCs at the same time (A new connection is interrupting
the previous one).
If you change
anything do not
forget to click
button “Save
Changes”.
Note: The login
name is the
unique identifier
of this account
and cannot be
changed as long
as this account
exists.
3.3 Menu ‘User Profile’(Initial state after registration)
Chapter 3 –Overview features and functions of u-link Web portal
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Each logged-on u-link user can change his own -
editable -profile data and set a new password via
menu ‘User Profile’.

Page 19
▪This menu will be used for access of
remote devices (connecting to remote
Router / Network devices).
▪The screenshot is displaying the initial
status after registering a new u-link system
account:
Status after registration:
▪No devices configured.
▪No active VPN connection of this
Service PC to the u-link Portal (The
software ‘u-link VPN client’ still has to
be installed and assigned/registered to
this administrator account if this
account shall be used for remote
access).
Device Topology
Initially the device container (here WDM
Engineering Systems) is empty.
A device topology (Router / user-defined
end devices) has to be configured in
menu Administration →Device
Management.
The name of the device container
automatically is set to the company name
which you have entered during the
registration process of this u-link system
account.
Connection Status PC
This section shows the connection status of the
u-link VPN Client (Service PC) which is assigned
(registered) to this user account.
The screenshot shows the initial status (no VPN
connection to the u-link VPN Server).
3.4 Menu ‘Service Desk’(Initial state after registration)
Chapter 3 –Overview features and functions of u-link Web portal
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Filter function
When inserting 3 or
more characters the
Device Topology will
only show Routers and
end-devices which
include these characters
List view
With this button you can
switch between the
Device Topology as a
tree and a flat list
containing Routers only

Page 20
▪This menu will be used for
creating and configuring the
accounts of Service users.
▪The screenshot is displaying
the initial status after
registering a new u-link system
account. At this time only the
account creator (Administrator)
of this u-link account is
existent.
▪All users are organized into the
2 groups ‘Administrators’ and
‘Service’. In the Entry-Version
the account creator
automatically is the
Administrator belonging to
group ‘Administrators’.
▪Each new created user will
become a member of group
‘Service’.
▪The Administrator is allowed to
fully maintain the account.
▪A Service user may maintain
the device topology (creating
Routers and user-defined
Ethernet devices) via Menu
‘Device Management’ but may
not maintain users (Menu
‘User Management’ is hidden).
The user who has registered the u-link system account
automatically is the account administrator. You can identify him
with the orange symbol.
This administrator account also can be used for remote access.
A new user can be created via button ‘Add’. Each created user
automatically is member of group ‘Service’.
User Management: Maintain users (create, delete, edit)
Device Management: Maintain devices (create, delete, edit remote Routers)
Status: Menu “Account Administration” is visible or hidden
Comments: Add/Delete comments to defined objects (Menu Device Management)
Documents: Add/Delete documents (any file type) to defined objects (Menu Device Management)
New & Downloads: Add/Edit news in menu News & Downloads
(This menu generally is visible for all created users)
Permissions of users are based on
membership of groups
‘Administrators’ and ‘Service’.
In the ‘Entry Version’ only these
two groups exist and have pre-
defined, not changeable
permissions.
3.5 Menu ‘User Management’(Initial state after registration)
Chapter 3 –Overview features and functions of u-link Web portal
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Group permissions
V1.5.3 / Jan, 2022
Creation of a new user

Page 21
▪This menu will be used to
configure device objects (Router,
Ethernet-based devices
connected to the Router)
representing the physical remote
devices.
▪The screenshot is displaying the
initial status after registering a
new u-link system account.
→No devices configured
(Container ‘Device Topology’
is empty).
▪After finishing the configuration
the device topology will be
displayed in menu ‘Service Desk’
to initiate a remote access to
Ethernet devices via defined
Router objects.
3.6 Menu ‘Device Management’(Initial state after registration)
Chapter 3 –Overview features and functions of u-link Web portal
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
In chapter “4.4 Setup of the Device configuration (u-link Web portal)”
you will find a detailed example how to setup a device configuration.
Device Topology
Initially the device container (here WDM
Engineering Systems) is empty.
The name of the device container
automatically is set to the company name
which you have entered during the
registration process of this u-link system
account.
Creating new devices
Router objects and Ethernet-based devices
for remote access have to be configured by
clicking button “New”.
Filter function
When inserting 3 or
more characters the
Device Topology will
only show Routers and
end-devices which
include these
characters

▪This menu is displaying status and
license information of this system
account.
▪When registering a new u-link
system account the version
always will be the ‘Entry Version’.
An upgrade to a chargeable
‘Standard Version’ can be done
via button ‘Upgrade to Standard-
Level’.
▪For logging and reporting
purposes following information will
be provided:
▪Current connections (Service
user to Remote Router)
▪Monthly data volume (VPN
traffic) of a Service user
▪Connection history (Service user
to Remote Router)
▪The VPN traffic and the
connection historyadditionally
can be exported to a csv-based
text file.
Page 22
3.7 Menu ‘Status’(Initial state after registration)
Chapter 3 –Overview features and functions of u-link Web portal
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
This button is only visible
when logged-in as
Administrator.
When entering the license
code of a ‘Standard
Version’ the extended
features will be provided
immediately.

Chapter 4: Setup of a remote access scenario (Example)
4.1Illustration of sample application
4.2Creating a new user account (u-link Web portal)
4.3Administration of a user account (u-link Web portal)
4.4Setup of the Device configuration (u-link Web portal)
4.5Preparing of the Service PC
4.6Configuration of the Router
V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Chapter 4 –Setup of a remote access scenario (Example)
Page 23

Page 24
4. 1 Illustration of sample application (Setup described on next slides)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Chapter 4 –Setup of a remote access scenario (Example)
V1.5.3 / Jan, 2022
Internet Router
Sample application
is connected to a
DSL-Router.

Page 25
Creating a new Service user (Step 1)
Note:
After registration of a new u-link system
account only the administrator account
exists. For doing a remote access the
administration account also can be
used, there is no need to create an
additional service user. Next slides
describe how to create and maintain a
service user. For the later described
example of a remote access session the
administrator account is used, not the
service user which we will create on the
next slides.
➢Gotomenu ‘User Management’.
➢Click button ‘Add’ in section ‘Users’.
▪A newwindowwill bedisplayedto
enter theuserdata.
➢Enter thedescribinguserdata.
➢Enter theusersmailaddress.
▪Itwill beusedforLogin totheu-link
Web portal.
➢Click button‘Insert‘.
▪Nowtheuserwill becreated.
▪The activationcodeforregistering
theu-link VPN clientofthisuser
automaticallywill begenerated.
4.2 Creating a new user account (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Window displayed after clicking button ‘Add’
Attention:
•The Login name (mail address ) is used as
unique identifier of this user account inside
of the global u-link system.
•It may be used only one time inside of the
global u-link system.
•The Login name cannot be changed and
cannot be used a second time as long as
this user accounts exists.
•If a new user has been created using a
wrong or not existent mail address (eg.
happened due to a typo) then the
automatically created ‘User registration
mail’ (after clicking ‘Insert’) never can be
delivered. In this case please delete the
user and create a new one using the correct
mail address.
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 26
Creating a new Service user (Step 2)
▪As next step the new user will be informed by
mail that the administrator has created a u-link
user account.
▪After clicking button ‘Insert’ this window will be
displayed to send the ‘User registration mail’ to
the mail address of field ‘Destination address’.
➢Click button ‘Send email’.
▪The recipientwill receivea mailoftype
‚Registration User‘ fromsenderaddress
[email protected] .
4.2 Creating a new user account (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Now the unique activation code
is created to be used for
registering the ‘u-link VPN
client’ on a Service PC.
Window displayed
after clicking button
‘Insert’
Note:
By default the ‘User registration mail’ is sent to the mail
address which is used for user login. For this reason both
the mail address (Login name) and the destination address
are the same.
If the user registration mail shall be sent to a different mail
address (for example to the administrator) then change the
destination address to the desired target mail address.
This window is
displayed after clicking
button ‘Information’
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 27
Hyperlink to set an initial password
of this user account for logon to
the u-link Web portal.
Mail ‘User Registration’
(sent by Administrator in previous step to
recipient ‘Destination address’)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
4.2 Creating a new user account (u-link Web portal)
Creating a new Service user (Step 3)
(Note: Step 3 is a To-Do by new Service
user)
▪Screenshot shows the mail (Type ‘User
Registration’) which the new user has
received from the u-link administrator.
▪At his time the user account already is
active but before login to the u-link Web
portal the new user has to set an initial
password.
➢Open the mail.
➢Click hyperlink ‘Generate password’.
▪Nowtheu-link Web page‚Create
password‘ will beopenedtoenter the
initialpasswordofthisuser.
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 28
u-link Web page to
enter the password
u-link Login page displayed
after creating the password.
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
4.2 Creating a new user account (u-link Web portal)
Creating a new Service user (Step 4)
(Note: Step 4 is a To-Do by new Service user)
▪Screenshot shows u-link Web page„Create password‘“
whichwill beopenedafter clickinghyperlink ‘Generate
password’ in user registration’ mail.
➢Enter the password twice.
➢Click button ‘Create’.
▪After successfulcreationtheu-link Login pageis
displayed.
▪Nowtheusercanlogintotheu-link Web portal
usinghisloginname(mailaddress) andthe
enteredpassword.
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 29
Creating a new Service user (Step 5)
▪The new user now is displayed in
section ‘Users’ and automatically
assigned to group ‘Service’.
▪The permissions of this user are based
on the permissions of group ‘Service’
having following rights:
▪User Management is prohibited (only
allowed for Administrator account).
▪Device Management is allowed
(Create/Maintain Routers and user-
defined end devices).
▪Access to Menu ‘Account
Management’ is allowed.
▪Documents and Comments can be
stored to defined device objects
(Menu Device Management).
▪Creation of information messages in
Menu ‘News & Downloads’ is
prohibited.
▪The permissions cannot be changed in
the Entry-Version.
4.2 Creating a new user account (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Now the unique activation code
to be used for registering the
‘u-link VPN client’ of this
service user is created.
New user being automatically
member of group ‘Service’
Information about displayable user parameters
Do a right mouse click on the grid header to open
a sub menu for enabling/disabling the visibility of
user parameters.
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 30
4.3 Administration of an user account
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 31
Actions to maintain a
service user
▪Following user-related actions are
provided:
▪View user data
▪Edit user data
▪Send an information mail to user
containing the user data
▪Delete the user account
Note:
The administration of user accounts
only can be done by the Administrator.
The menu item ‘User Management’ is
not visible for service users.
4.3 Administration of an user account (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Now the unique activation code
to be used for registering the
‘u-link VPN client’ of this
service user is created.
User-related actions
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 32
Action ‘View user data’
➢Click button ‘View’ to open a new window showing
the user data on tabs
−User Data
−Status Information
−Activation Code
▪In viewing mode no data can be changed.
4.3 Administration of an user account (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Button ‘View User Data’
After first VPN connection of this
service user to the u-link VPN server
the status is changed to ‘In Use’.
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 33
Action ‘Edit user data’
➢Click button ‘Edit’ to open a new window showing the user data
on tabs
−User Data
−Activation Code
▪In this mode data can be changed.
4.3 Administration of an user account (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Button ‘Edit User Data’
Changeable
parameters
Notchangeable parameters
(Permissions assigned by
group membership)
If you want to use a second PC running as ‘u-link
VPN Client’ using this activation code then -if state
is ‘In Use’ -you first must enable the checkbox
‘Release for additional activation’ to allow an
additional use.
Note 1:Checkbox first can be set if state is ‘In Use’
(is changed when service user first time connects
to u-link).
Note 2:If you release several Service PCs with the
same activation code be aware that you do not
start a VPN connection on these PCs at the same
time. All are VPN connections are identical clones
from the perspective of the VPN server. If you
would do this a new connection is interrupting the
previous one).
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)
Password change
by Administrator
Default language
when logged in to
u-link Portal
Default Home page
when logged in to
u-link Portal
Activate / Deactivate
the users u-link access.
If set to ‘Yes’ then this user will be the new Administrator having full
permissions.
Attention:The current administrator will be become a Service user
(Member of group ‘Service’) having these limited group permissions.
Set if User is working
from China or not.

Page 34
Action ‘Send information mail to user’
➢Click button ‘@’ to open a new window for
sending an information mail (containing the user
data) to the users mail address.
4.3 Administration of an user account (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Button ‘Send mail with user data’
This window will be displayed
after clicking button ‘@’.
Sample mail which the addressed
service user will receive.
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 35
Action ‘Delete user’
➢Click button ‘Delete’ to delete the user.
▪A window will appear asking you if you are
sure to delete the user. After confirmation the
user will be deleted.
▪The list user item in the section ‘Users’ will be
removed.
▪After deletion the mail address used for user
login then can be used again.
4.3 Administration of an user account (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Button ‘Delete user’
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 36
4.4 Setup of the Device configuration
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 37
Create a Router object (Step 1)
➢Gotomenu “Device Management”.
➢Click Tab “New” to configure the first
Router object (access point to devices
at remote network).
➢Drag the Router/Firewall object from
“Device selection” and drop it on the
container object in ‘Device Topology’.
▪An informationwindowwill bedisplayed
showingthatthisactionwas accepted.
Bycreatinga Router objectan unique
activationcodewill becreated, which
laterhastobeusedtoassigna
physicalRouter tothisdefinedobject.
▪NowthenewRouter objectisdefined
asfirstdevicein thedevicetopology
container.
▪Next thepropertiesofthisRouter object
havetobeconfigured.
4.4 Setup of the Device configuration (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)
Drag and drop

Page 38
Configuration of properties of new
Router object (Step 2)
➢Highlight the Router/Firewall object and
click Tab “Device configuration” to
display object specific item parameters.
▪Section “Properties”
All items with an “Edit Icon” (except
parameter Activation code) can be
edited to store individual data to this
object. These parameters (text-based
fields) are used only for information.
They have no relevance regarding the
remote access functionality.
▪Section„Actions“
Bydefaultthe2 actions
Connect VPN Router ↔u-linkand
Connect VPN PC ↔u-link↔Router
arepredefined.
Firstactioncanbeusedtostarta VPN
connectionon theRouter totheu-link
VPN Server remotelyfromtheu-link
Portal (via WWH function).
Secondactionwill beusedtoinitiatea
VPN pass-throughconnectionfroma
Service PC via u-link VPN Server tothe
Router (toaccessremote devices).
Via button„Add“ customizedactions
(currentlyonlyhttp/https basedcalls)
canbedefinedandstartedvia mouse
click).
Note: Actions areonlyactivein menu
„Service Desk“
▪Section “Documents”
Storing/Retrieving documents (any file type)
assigned to this object. Can be done by all
u-link account users.
▪Section„Comments“
Creatinganycomments(information) tothis
object. Useable by all u-link account users.
Screenshot shows initial
data after creating this
Router/Firewall object.
The displayed activation code (not
changeable) is unique for each defined
Router object. Via “Edit Icon” the
activation code can be released for
additional use (for example in case of
replacement of a defective Router).
Note:
For preparing a remote access session via a Router
(which will be assigned to this Router object) you only
need the activation code. Copy and save this activation
code which later is necessary when preparing the physical
Router for u-link access.
For a remote access session it is not necessary to edit
anything. But we recommend to edit the text-based fields
in section “Properties” to better identify the defined object.
4.4 Setup of the Device configuration (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 39
Screenshot of created
Router object after
changing the values of
some parameters in
section Properties.
This screenshot shows the -on previously
slide -created Router object after
changing the properties of this Router
object.
4.4 Setup of the Device configuration (u-link Web portal)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Changed name also is displayed in section Device Topology
V1.5.3 / Jan, 2022
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

Page 40
4.4 Setup of the Device configuration (u-link Web portal)
Configuration of a ‘User defined end
device’ connected to Router LAN port
(Step 3)
▪The objecttype „User definedend device“
canbeusedtodefineanydevicetype being
accessiblebyan Ethernet communication
(TCP/UDP).
▪Thisobjecttypewill be used to provide a
mapping of remote accessible devices
behind the Router. It is not necessary to
create ‘User definedend devices‘ for
remote access because all IP addresses at
Router LAN port are accessible when
having a pass-through VPN connection to
the Router.
➢Select Tab ‘New’
➢Drag from ‘Device selection’ the object
‘User defined end device’ and drop to the
container object ‘Access Router Machine 1’.
➢Click Tab ‘Device configuration’ and
configure the object specific properties as
you want (Screenshot shows 2 already
configured ‘User-definedend devices‘).
These parameters (text-based fields) are
used only for information. They have no
relevance regarding the remote access
functionality.
▪Same as for a Router object the features
‘Actions’, ‘Storing documents and
comments’ are provided for this object type.
Screenshot shows 2 configured ‘User defined end
devices’ connected to LAN port of the Router. One is
representing a ProfinetPLC, the other one is
representing an u-remote IO device.
Note: This configuration we will use for setup of the
remote access scenario.
Drag and drop
on Router object
Screenshot after creating an
“User defined end device”
Preparing of the device configuration now is finished !
In the next steps both the Service PC (using this administrator account) and the
physical Router (which later is located in the remote network) have to be configured.
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Chapter 4 –Setup of a remote access scenario (Configuration u-link Web portal)

4.5 Preparing of the Service PC
Install and configure the u-link VPN client software
V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 41
Chapter 4 –Setup of a remote access scenario (Configuration Service PC)

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 42
Download u-link VPN Client
➢Logon to the u-link Web portal using your user
name and password
➢Gotomenu “News & Downloads”
➢Download the provided software from section
“News and Downloads from global u-link
administration”
Unzip the downloaded file and install the
software
▪For installation you may need admin rights.
Important notes:
▪A newer VPN client (e.g. V2.0.129) can be
installed without de-installation of an already
installed Client (e.g. V2.0.36).
▪An already registered user account automatically
is taken over. If no user account is registered then
please go to tab „Configuration“ and click button
„Register user profile”. This starts the registration
process.
4.5 u-link VPN Client →Download and Installation
V1.5.3 / Jan, 2022
Chapter 4 –Setup of a remote access scenario (Configuration Service PC)
In this section we
provide updates of all
downloadable files.
Screenshot after successful installation New u-link
desktop icon

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 43
Start software u-link VPN Client on the Service PC
▪The program window will be opened and the u-link icon
will be displayed in the notification area of the taskbar.
▪Initially the software is not assigned to a u-link user
account.
▪Before starting a VPN connection to the u-link VPN
server the software has to be registered using the
unique activation code of the u-link user account which
shall be used for remote access.
u-link VPN client after initial start.
Status:Not assigned to u-link user (Profile status
is “not activated”.)
Notification area of the taskbar
Icon of ‘u-link VPN client’ when the
program has been started.
Status:
Not connected
4.5 u-link VPN Client →Start program
Chapter 4 –Setup of a remote access scenario (Configuration Service PC)
V1.5.3 / Jan, 2022

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 44
➢Go to Tab Configuration
➢Select your language (English / German)
➢Dependant of your Internet connectivity configure your
Proxy Server configuration (often necessary if your
Internet access is controlled by corporate IT systems).
The Proxy server parameters will be provided by your
IT department).
▪Leave checkbox ‘Use Proxy Server’ unchecked if
your PC is not passing a Proxy server for Internet
access.
Initial registration of your u-link user account
➢Click button “Register” to start the registration process.
▪For the registration process you need the user
specific activation code. The activation code can be
found either in the received mail ‘User Registration’
or in menu ‘User Profile’ on tab ‘Activation Code’
when logged-on to the u-link Web portal.
4.5 u-link VPN Client →Configuration (Step 1)
Chapter 4 –Setup of a remote access scenario (Configuration Service PC)
This message appears when changing the language or editing the proxy
parameters.
Click button ‘Save / Activate’ before starting the registration process.
V1.5.3 / Jan, 2022

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 45
Steps of registration process after clicking
button ‘Register user profile’
➢Click button ‘Next’ (Screenshot 1).
➢Enter your activation code and click button
‘Next’ (Screenshot 2).
▪Wait some seconds until the registration
process is done (Screenshot 3). Finally the
result is displayed.
➢Click button ‘Finish’ (Screenshot 4).
▪Wait around 10..15 seconds until the data of
the registered user account will be displayed in
section “Profile Registration / Activation”. Now
the u-link VPN client is assigned to your u-link
user account .
➢Change to Tab “Connection” and try to start a
VPN connection.
Screenshot 1 Screenshot 2
Screenshot 3 Screenshot 4
Screenshot of a successfully
registered ‘u-link VPN client’
4.5 u-link VPN Client →Configuration (Step 2)
Chapter 4 –Setup of a remote access scenario (Configuration Service PC)
N2A7YCVXXXXX
V1.5.3 / Jan, 2022
New button name “Change” (instead of “Register”)
after first registration process
Service_master@wdm-engine
WDM engineering
Service master

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 46
Possible errors if the registration process has failed:
▪No Internet access
Ensure that your PC can access the Internet.
▪Registration process blocked by Proxy Server
If you are located inside of your company network please check if
your company Internet connection uses a Proxy server. If yes,
please configure your Proxy parameters (provided by your IT
department) on tab "Configuration".
▪Wrong activation code
Evaluate that you have entered a valid activation code.
▪Activation code already registered and not released for
additional use (Status “In use”)
If you have entered an already registered activation code (now
using on a second PC) you first must release the additionaluse of
this activation code.
➢Login to u-link Web portal using your user account.
➢Gotomenu User profile / Tab Activation Code.
➢Activate checkbox “Release for additional activation”.
➢Click button “Update” (not displayed in screenshot below).
This window will appear
if the registration
process has failed!
Note:
If you are logged-in as Administrator you can set
the checkbox for each user in menu “User
Management”. Click on the Edit icon of an user item
and select Tab “Activation Code”.
N2A7YCVXXXXX
4.5 u-link VPN Client →Configuration (Error handling when registration process failed)
Chapter 4 –Setup of a remote access scenario (Configuration Service PC)
Note:
If the problem cannot be solved please
cancel this process. Then change to tab
“Log / Support”. Start the Support Wizard
and send the log file (gathered by Support
Wizard) to the Weidmülleru-link support
mail address.
V1.5.3 / Jan, 2022

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 47
▪Conditions:
▪The u-link VPN client is registered (Profile status
‘activated’ and displaying the user data).
▪The WWH connection is established (Status
‘Connected’).
➢Click button ‘Connect VPN’.
▪The Client is starting the VPN connection to the u-link
VPN server (wait around 15..20 seconds).
▪When successfully connected the online status, some
additional information and statistic information will be
displayed.
▪The u-link icon in the task bar is displaying an
established VPN tunnel by changing the background
color to green.
➢Open a browser and logon to the u-link Web portal with
user name and password of the user having this activation
code.
▪In menu ‘Service Desk’ the PCs connection to the u-link
VPN server will be signalized by a green colored double
arrow.
▪Now you are connected to the u-link VPN server but at
this time you still do not have any pass-trough
connection to a Router/Remote network. This has to be
configured in the next steps.
4.5 u-link VPN Client →Establish a VPN connection to the u-link VPN server
Chapter 4 –Setup of a remote access scenario (Configuration Service PC)
Icon taskbar
N2A7YCVXXXXX
N2A7YCVXXXXX
VPN status: Connected
Icon taskbar
VPN status: Not connected
Screenshot u-link
Portal (Menu Service
Desk) showing the
VPN connected status
Configuration of Service PC now is finished!
Next the physical Router (which later is located in the
remote network) has to be configured.
V1.5.3 / Jan, 2022

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 48
WWH error (WHH connection failed)
After successful registration the u-link VPN client
automatically is trying to initiate a WHH connection to the
u-link WWH server. If this fails it can be caused by
following reasons:
▪PC cannot resolve DNS names
▪An outgoing SSL connection using protocol TCP / port
443 cannot be established. Check if a corporate
firewall is blocking the outgoing connection. Configure
if necessary your proxy server settings.
Note:An error message indicating the connection
problem will be displayed.
VPN error (VPN connection failed)
Establishing a VPN connection (via button “Connect
VPN”) is only possible if you have a running WWH
connection. In case of a VPN failure –same as for a
WWH error -an error message will be displayed indicating
the connection problem.
General procedure in terms of solving a
connection error (WWH and VPN):
➢Go to tab “Log / Support”
➢Click button “Open” to inspect the Log file
➢If you cannot solve your connection problem please
start the “Support Wizard” (which gathers all log
information) and send the resulting ZIP file to the
Weidmülleru-link Support
4.5 u-link VPN Client →Error management if the WHH connection or the VPN tunnel could not be established
Chapter 4 –Setup of a remote access scenario (Configuration Service PC)
Screenshot shows an
error message due to
WWH failure
N2A7YCVXXXXX
V1.5.3 / Jan, 2022

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 49
Chapter 4 –Setup of a remote access scenario (Configuration Router)
4.6 Configuration of the Router

Page 50
Download of latest Router firmware
(Step 1)
▪All the Router models except –FN
version (which does not support VPN
functions) can be used for u-link.
▪If you would like to use an already
running Router with u-link then you
need a firmware version 3.0.2 or higher.
➢Logon to the u-link Web portal using
your user name and password.
➢Gotomenu ‘News & Downloads’.
➢Download the provided firmware from
third section ‘News and Downloads
from global Weidmülleru-link
administration’.
Unzip the downloaded firmware
(Step 2)
▪The ZIP file is containing the binary file
(firmware) and a pdf-file (Change log).
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
In this section we
provide updates of all
downloadable files.

Page 51
Connecting to the Router and open the Web interface (Step 3)
▪We assume that the Routers configuration is set to factory default
values (LAN IP: 192.168.1.110, WAN IP: 192.168.2.110 or DHCP for 6-
Port models).
➢Connect the PC to the Router LAN or WAN port (Here we use the LAN
port).
➢Configure the PCs Ethernet interface to the same IP network range as
the Router (e.g. 192.168.1.99).
➢Open a browser and enter IP address 192.168.1.110 to open the
Router Web interface.
➢Enter user name adminand password Detmold.
▪The home page (System state) will be displayed.
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Home page of Router
Web interface
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Note about help tool “WeidmüllerRouter Search Utility”
The software WeidmüllerRouter-Search-Utilitycan be used to find WeidmüllerRouters
and detect theirs IP addresses within a switched network. This software is very helpful if
you don’t know the current IP address of a Router. This e.g. can happen in cases that you
have forgotten the current IP configuration or if you have lost the router access in case of
configuring an unintended IP address. The main features of the software are
▪Detecting a router and displaying the parameters IP address, subnet mask, MAC
address, serial number, device name, device location and firmware version
▪Change the IP address of a detected router
▪Open the web interface of a detected router
The softwarecanbedownloadedvia thislink
http://www.weidmueller.com/int/products/electronics-and-automation/industrial-
ethernet/software
➢Goto sectionIndustrial Security Router (Firmware and Software for IE-SR-2/6GT-
LAN/4G/LTE)
➢Download entryWeidmüller Router Search Utility

Page 52
Updating the Router firmware to a u-link enabled version
(Step 4)
▪Note: If you update an individually configured Router with an
older firmware version the stored configuration will not be
changed as long as if you not enable checkbox “Reset to
factory defaults”.
➢Go to menu System →Software Update.
➢Click button browse and select the firmware file (eg. IE-SR-
2GT-LAN_FN_3G_V3.1.0_Build_74521.bin).
➢Click button ‘Start Update’.
▪Wait around 2 minutes (until the PWR LED is no longer
blinking).
➢Open the browser window again using the same IP address.
▪In section ‘System data’ of menu ‘System state’ the new
current firmware version is displayed.
Displays the
current firmware
version after
update process
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 53
Configuration of basic IP parameters (Step 5a)
Internet access via WAN port and using DHCP
▪Now the IP parameters of the Routers Ethernet
interfaces have to be configured. The LAN port has to
be set according to the IP range of the remote network.
The WAN port will be used for Internet access.
▪Based on our example we will configure the IP
parameters as shown in the screenshot. If you have a
4G Router (IE-SR-2/6GT-LTE/4G), inserted a SIM card
(any provider with Internet flat) you alternatively can
configure the Internet access via the 4G connection.
➢Gotomenu Configuration →IP Configuration.
➢Set WAN port to DHCP (getting IP parameters from a
DHCP server).
➢Set LAN IP to 192.168.1.254.
➢Enable checkbox ‘NAT Masquerading’ at LAN port.
➢Click button ‘Apply Settings’.
▪Note: Now the Router will apply the settings. As
result you will lose the browser connection to the
Router due to changed LAN IP. Wait some seconds
and re-open the Web interface using the new IP
address 192.168.1.254.
Router receives Default
gateway from DHCP server
Currently connected to PC via Router LAN port (IP: 192.168.1.110)
Important note
“NAT Masquerading” has to be activated
if devices –connecdedto Router LAN
port -does not have configured the
Router LAN IP as gateway.
Effect of NAT masquerading
If the checkbox is enabled then the
Router is replacing the source IP of an
incoming IP packet (via u-link VPN
tunnel) with its own LAN IP when the
packet is outgoing out of the LAN port to
a target device. Internally the Router
stores the requesting source IP to be
able to forward a reply packet back to
the original sender. When the LAN
device receives the request packet it
believes that the request comes from a
member of its own network (Router's
LAN IP) and is able to reply without
having configured a gateway.
Recommendation:Activate generally
"NAT masquerading" at LAN port when
using the Router with u-link.
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Internet access
via WAN port
(IP parameters
via DHCP)
Screenshot after parameter
configuration (but still not applied).
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 54
Configuration of basic IP parameters(Step 5b)
Internet access via WAN port and using a static IP
address
➢Gotomenu Configuration →IP Configuration.
▪Configure the WAN IP settings according to the
network to which the WAN port will be connected.
➢Enter IP address and subnet mask.
➢Enable WAN checkbox ‘NAT Masquerading’.
➢Enter the Default gateway (IP address of a Router
located in the WAN side network which is providing
the Internet access).
▪In this example the LAN IP settings are configured with
same value as used in previous slide.
➢Set LAN IP to 192.168.1.254 and subnet mask to
255.255.255.0.
➢Enable LAN checkbox ‘NAT Masquerading’.
➢Click button ‘Apply Settings’.
▪Now the Router will apply the settings. As result you
will lose the browser connection to the Router due
to changed LAN IP. Wait some seconds and re-
open the Web interface using the new IP address
192.168.1.254.
The Default gateway to get Internet
access explicitly has to be
configured.
Currently connected to PC via Router LAN port (IP: 192.168.1.110)
IP parametersofLAN portsame as
configuredon previousslide.
Recommendation:Activate
generally"NAT masquerading" at
LAN port when using the Router with
u-link.
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Internet access via WAN port
configured with static IP
parameters.
Recommendation:Activate
generally"NAT masquerading" at
WAN port when using the Router
with u-link.
Screenshot after parameter
configuration (but still not applied).
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 55
Configuration DNS server (Step 5c)
Only necessary if WAN port is using a static IP
address for Internet access.
▪Note: To resolve DNS names (like www.google.com)
the Router must have access to a DNS Server. If the
WAN port is configured using DHCP then the IP
address of the DNS server automatically will be
provided by the DHCP server.
▪If the IP address of the WAN port is configured with a
static IP then additionally a DNS server has to be set
manually.
➢Gotomenu Configuration →Network →DNS.
➢Enter your own Hostname (is optional).
➢Enter at least 1 IP address of a DNS server (starting
with parameter ‘1
st
DNS server’).
➢Click button ‘Apply Settings’.
Router now is connected via IP 192.168.1.2544.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
In thisexamplethepublic
Google DNS server(IP
8.8.8.8) isused.
Note: ThisIP address
generallycanbeusedto
resolveDNS names.
Skip this step if the WAN
port of the Router is
configured to DHCP.
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 56
Configuration of date / time parameters (Step 6)
▪Note: The VPN connection to the u-link VPN server will
use a certificate for encryption. Generally the validity of
a certificate depends on date/time stamps (valid
from/valid until). For this reason the Routers date and
time settings should be set to a current value. Due to
the fact that for an u-link access the Router always
must have an Internet connection it is recommended to
enable the time server synchronization (NTP) that the
Router automatically will update date and time. If no
time synchronization is possible then date and time
values have to be set manually.
➢Go to menu Configuration →General settings →Date
& Time.
➢Select your time zone.
➢Enable checkbox ‘Time Server Synchronization’.
➢Enter your preferred NTP servers or use the defaults
ones.
➢Click button ‘Apply Settings’.
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 57
Configuration of HTTP proxy parameters if the
Internet connection is passing a Proxy server,
requiring authentication by user name and
password (Step 7)
▪See section ‘Preparing the Service PC (u-link VPN
client)’ for additional information in terms of proxy
settings. Be aware that the Router proxy parameters
depend on the network security settings of the Routers
location.
➢Go to menu Configuration →Network →HTTP Proxy.
➢Enter the Proxy Server specific parameters (provided
by IT department of remote network which the Router is
using for Internet access).
➢Click button ‘Apply Settings’.
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Factory default settings (No
proxy parameters configured)
Example of configured proxy
parameters.
Note:
For an u-link connection the
configured proxy parameters only
are used if in the u-link
configuration menu the checkbox
“Use a system wide HTTP proxy”
is activated.
Skip this step if the Routers
Internet access is not
passing a Proxy server.
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 58
Establishing a network connection via WAN port
(Step 8) / In this example we use DHCP for IP
settings of WAN port.
➢Connect the WAN port to a network which is providing
DHCP and allowing Internet access.
▪Wait around 30 seconds that the Router is getting
IP data from DHCP server.
➢Gotomenu Diagnostic →System state (Home page).
➢Check menu ‘System state’ if date and time values
have current values.
➢Check section ‘Interface state’ if WAN port has
received an IP address.
Check Internet access (Step 9)
➢Gotomenu Diagnostic →Ping test.
➢Enter a DNS name (eg. www.google.com) or an IP
address (eg. 8.8.8.8) and click button ‘Apply Settings’.
▪When having an Internet connection the Router will
displaying the result.
Router now connected via IP 192.168.1.254
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Screenshot of a successful “Ping” test
Screenshot of menu “Ping test”
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
1
2
2
1

Page 59
Activate the Router for u-link (Step 10)
➢Gotomenu Configuration →VPN →u-link
(Tab ‘Configuration’).
➢Enable checkbox ‘Enable u-link instance’.
➢Use default values of section ‘VPN connection
settings’.
➢Enable checkbox ‘Use a system wide HTTP
proxy’ if the Router Internet access is passing a
Proxy Server.
▪Note: If the checkbox will be enabled the
Proxy server settings must be configured as
described previously.
➢Use default settings of the other parameters.
➢Click button ‘Apply settings’.
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Router Web interface (Menu u-link)
Screenshot of the enabled u-link
instance.
Note:
Settings of u-link parameters are
described on the next slide.
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 60
Explanation of u-link configuration
parameters
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Initiation by digital input (Checkbox)
If enabled the 24VDC digital input can be
used for activating a VPN tunnel to the u-link
VPN server.
Log Level (Dropdown box)
Selection of logging level (Messages
shown in the Event Log).
Inactivity timeout (Dropdown box)
The Router automatically will shutdown
a VPN connection after the selected
time if no traffic was recognized during this time.
HTTP Proxy (Checkbox)
Enable if the Internet access is passing a Proxy
server (Configure Proxy settings in menu
Configuration →Network →HTTP Proxy)
VPN LED / Output controller
If set to “u-link” an active VPN
tunnel will be signalized at front
LED “VPN” and the digital output
“VPN-active”.
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
“Initiation from u-link web portal” (Dropdown box)
Controls if the u-link VPN tunnel can be activated/deactivated remotely from the u-link Web portal via the WWH
(world wide heartbeat) function.
Selections:
Never allowed: Remote activation/deactivation of the VPN tunnel from u-link Web portal never is allowed.
Always allowed: Remote activation/deactivation of the VPN tunnel from u-link Web portal always is allowed.
Allowed if digital input (VPN-Initiate) is active:Means that remote activation/deactivation from u-link Web portal only is allowed when the digital input “VPN-Initiate”
is set to 24VDC.
Explanation:If a machine operator at Router location has activated the 24VDC digital input “VPN-Initiate” (eg. by key switch) then the VPN tunnel will be started
providing the remote access. But if the service guy will not immediately start the service (means no traffic on the VPN tunnel) then by default the Router
automatically de-activates the VPN tunnel after 1 hour of no traffic. But to due to the fact that the key switch still is on (means the access permission is still granted),
the remote Service user may re-activate the VPN tunnel remotely. If the key switch again is set to off (24VDC removed from digital input) then the VPN tunnel will be
de-activated immediately and the remote Service user no longer is allowed to activate the VPN tunnel remotely.

Page 61
Register (Assign) the Router to the defined
Router object configured in the u-link Web
portal (Step 11)
▪For the registration process we need the
unique activation code of the Router object.
The activation code can be found in the
properties of the created Router object (u-link
Portal: Menu ‘Device Management’).
➢Select Tab ‘Registration’.
➢Enter the activation code of the defined Router
object in field ‘Registration code’.
➢Click button ‘Register’.
▪Now the Router is initiating the registration
process to the u-link Portal server. This
process typically takes time of around 30
seconds.
➢Please click button “Reload” repeatedly to
update the current registration status.
Screenshot u-link Web portal (Menu Device Management)
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Screenshots Router Web interface
(Menu u-link / Tab Registration)
1: Not registered (but registration code
already entered)
2: Ongoing registration process (after
clicking button “Register”)
3: Successful registration
Successful registrationongoing registration process
As result the Router should have the
status “registered”.
If the registration process has failed
please refer to Appendix A (Registration
of Router to u-link failed).
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 62
Check the status of the u-link connection (Step 12)
➢Select tab ‘State’.
▪After successful registration the Router is initiating the
WWH communication to the u-link (Status ‘Online’).
▪Notes aboutWWH
The WWH function(World Wide Heartbeat) isan outgoing
TLS/SSL connection (TCP/443, like HTTPS) to the u-link
WWH server and is independent from a VPN connection
which will be used for remote access.
The Router sends via this peer connection periodically a
„Still alive“ message to the WWH server. The WWH server
then signalizes the u-link Web server that the Router is
alive. This status is displayed in the Service Desk of the u-
link Web portal.
Via the WWH connection it is possible to activate/de-
activate the VPN tunnel of the Router remotely from the u-
link Web portal server.
The encrypted WWH connection automatically is started
when the Router is powered on, having an Internet
connection and is registered to a Router object in a u-link
account.
▪Activating the VPN tunnel via menu “State”
Additionally to the most used methods to initiate a VPN
tunnel (remotely via u-link Portal or by 24 VDC digital input)
the VPN connection can be activated / de-activated via
button ‘Connect’.
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Router Web interface
(Menu u-link / tab State)
Status:
•WWH online
•No VPN connection to the
u-link VPN server
This icon is representing
the WWH online status of
the Router.
Now the Router is ready for initiating a remote access session!
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
u-link Web portal
Menu ‘Service Desk’
Activate / De-activate a
VPN tunnel via button
‘Connect / Disconnect’.

Page 63
Save the Router configuration (Step 13)
➢Go to menu System →Save.
▪If you have changed and applied any settings then in
each menu a flashing disk icon is displayed,
indicating that the applied settings not yet are saved
to the flash memory. By clicking on the disk icon the
menu ‘Save’ directly will be opened.
➢Click button ‘Save settings’ to store the configuration in
the non-volatile memory.
4.6 Configuration of the Router
Chapter 4 –Setup of a remote access scenario (Configuration Router)
Status:
Any parameters are changed
and applied but not saved.
Status:
Current configuration is saved.
No flashing disk icon.
Flashing disk icon
indicates an applied but
not saved configuration.
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Chapter 5: Initiating an access to remote LAN devices
Conditions
Device configuration in u-link Web portal has been done.
Software ‘u-link VPN client’ is installed on Service PC and registered.
Router has been configured and registered.
V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 64
Chapter 5 –Initiating a remote access to remote LAN devices
Note:
For demonstrating the access to remote LAN
devices we will use the Administrator account.

Page 65
Logon to the u-link Web portal using your
administrator account (Step 1)
▪Enter user name and password of the u-link
administrator.
▪Click button ‘Login’.
5.1 Starting a remote access session
Chapter 5 –Initiating a remote access to remote LAN devices
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 66
Gotomenu Service Desk (Step 2)
▪In section ‘Device Topology’ the same
defined objects are displayed which
previously have been created in menu
‘Device Management’.
▪In section ‘Connection status PC’ the
current VPN connection status (of this
PC) to the u-link VPN server is
displayed.
▪In the ‘Device Topology’ the current
connection status of a Router is
signalized by following different icon
symbols:
5.1 Starting a remote access session
Chapter 5 –Initiating a remote access to remote LAN devices
Status Router:
•Connected to u-link via WWH communication
•No VPN connection
Status Service PC (u-link VPN client):
•Not connected to u-link
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
The Router has no connection to u-link.
•Device not configured to use u-link or
•Device is powered off or
•Device has no Internet access.
The Router has an online connection to
u-link WWH server.
The Router has an active VPN
connection to the u-link VPN server.
The Service PC has a pass-through VPN
connection via the Router to its LAN
network.
For initiating a remote access session the Router
must have at least one of these both states.

Page 67
Connect the Service PC to u-link VPN server
(Step 3)
➢Start program ‘u-link VPN client’.
➢Click button ‘Connect VPN’.
▪When successfully connected the status and
some additional information will be displayed
in the program window.
▪The u-link icon in the task bar is displaying a
connected status.
➢Go back to menu ‘Service Desk’ of the u-link
Web portal.
➢The PCs connection to the u-link VPN server will
be signalized by a green colored double arrow.
▪Now you are connected to the u-link VPN
server but at this time you still do not have a
pass-trough connection to a Router/Remote
network.
Status:
Connected
N2A7YCVXXXXX
5.1 Starting a remote access session
Chapter 5 –Initiating a remote access to remote LAN devices
Screenshot u-link Portal (Menu
Service Desk)
Status Service PC: Connected
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 68
Start the Router VPN connection remotely
via Web-Portal (Step 4)
▪The VPN connection of the Router to the u-link
VPN server can be activated via WWH
communication. The permission to activate the
Router VPN tunnel remote via u-link Portal can
be set or prohibited in menu ‘u-link’ of the
Routers Web interface (default allowed).
➢Select the Router by clicking on the Router
object (Icon or name) to display the object
parameters (Properties, Actions, …)
➢Start the VPN connection by clicking button
‘Connect VPN Router ↔u-link’ (Section
Actions).
▪Now a ‘VPN activate command’ will be sent
to the Router via WWH connection.
▪Wait around 30…40 seconds then the new
status ‘Connected’ will be displayed.
▪Finally both the Service PC and the Router are
connected to the u-link VPN server but no pass-
through connection via the u-link VPN server is
established until now.
5.1 Starting a remote access session
Chapter 5 –Initiating a remote access to remote LAN devices
Status Router beforeclicking
‘Connect VPN Router ↔u-link’
•Active WWH communication to u-link
•No VPN connection
Status Router afterclicking
‘Connect VPN Router ↔u-link’
•Active WWH communication to u-link
•VPN connection to u-link VPN server
established
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 69
Initiate a pass-through connection
between Service PC and remote Router
(Step 5)
➢Click button ‘Connect VPN PC ↔u-link ↔
Router’ to establish a pass-through
connection between Service PC and the
Router.
▪A successful pass-through connection is
displayed in section ‘Connection Status PC’
containing following information:
▪Connected to:Name of the selected
accessible Router / remote network.
▪Accessible remote network:IP range of
accessible remote network.
▪Router VPN IP:Additional VPN-IP address
of the Router beside LAN/WAN IP’s. Exists
as long as the pass-through connection is
established. Via this VPN-IP the Router’s
Web interface also is accessible.
▪Routing to remote network:Status ‘active’
means that the Service PC has accepted
an additional setting in its routing table how
to access devices at the remote network.
5.1 Starting a remote access session
Chapter 5 –Initiating a remote access to remote LAN devices
Click button to start a pass-through
connection between Service PC and Router.
Established pass-through connection
between Service PC and Router.
Changed Router icon
signalizing a pass-
through connection to
this Service PC
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Now the remote devices (any IP address) connected
to LAN port of remote Router can be accessed.
V1.5.3 / Jan, 2022

Page 70
Accessing a remote LAN device (Step 6)
Example shows a Web access to an
u-remote IO device.
▪When having a VPN pass-through connection
then generally all devices at the remote network -
matching the LAN net/subnet -are accessible by
the Service PC. In this example we will access the
Web interface of device ‘u-remote coupler PN’ (is
of type ‘User defined end device’) via IP
192.168.1.55. For the Web access we use the
action “Open Web interface” defined for this
object in menu ‘Device Management’.
➢Select (Highlight) item ‘u-remote coupler PN’.
➢Click button ‘Open Web interface’ in section
Actions.
▪Now a new browser tab will be opened showing
the Web interface of the u-remote IO device.
▪If no action is defined open a browser manually
and enter the directly the IP address into the
input line.
Note:
▪For security reasons currently only a Web access
can be defined as an u-link action.
▪But as long as the pass-through connection is
established you can run any program or
application which needs access to an IP of the
remote network.
5.1 Starting a remote access session
Chapter 5 –Initiating a remote access to remote LAN devices
Select u-remote device object then click
user-defined action “Open Web interface”
New browser tab showing the Web
interface of the u-remote IO device
(IP 192.168.1.55).
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 71
Disconnect from the selected Router /
remote network (Step 7)
(Finish the remote access session)
➢First close all active sessions or programs
which are accessing IP addresses of the remote
network.
➢Click button ‘Disconnect’.
▪Now you will have the previous status that
both the Service PC and the Router are still
connected to the u-link VPN server but you
have no longer a pass-through connection.
➢Select the Router item and click ‘Disconnect
VPN Router ↔u-link’ to shutdown the Routers
VPN tunnel.
5.2 Closing the remote access session
Chapter 5 –Initiating a remote access to remote LAN devices
Step 1:Close the VPN pass-through connection of
the Service PC to Router / remote network
(Use one of the 2 options).
Step 2:Shutdown the Router VPN
connection to the u-link VPN server.
Status 3:New Router status
after VPN shutdown showing
an active WWH connection.
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022

Page 72
Shutdown the VPN connection of the
Service PC / Logout from u-link Portal
(Step 8)
➢Open the window of the ‘u-link VPN client’ by
clicking the u-link taskbar icon.
➢Click button ‘Disconnect VPN’.
➢Go back to menu ‘Service Desk’ of the u-link
Web portal.
▪After some seconds in section
‘Connection status PC’ the disconnected
status is displayed.
➢Click button ‘Logout’ to close the u-link portal
session.
➢Finally exit program
‘u-link VPN client’.
5.2 Closing the remote access session
Chapter 5 –Initiating a remote access to remote LAN devices
Shutdown the Router VPN connection
to the u-link VPN server
Remote access
procedure is finished!
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.V1.5.3 / Jan, 2022
Disconnected status
(green colored arrow
has changed to grey)
Background color
of u-link icon in the
notification area
will change from
green to white.
N2A7YCVXXXXX

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 73
Chapter 6: Further functionality
1 –Dashboard
2 –User defined actions
3 –News from your administrator
Chapter 6 –Further Functionality

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 74
➢For Router objects there is a dashboard available, which will open in a new tab, when klickedon action button “Open Dashboard”
➢On the dasboardyou will get status information about the selected router.
6.1 Dashboard
Open Dashboard to get
status information
Chapter 6 –Further Functionality

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 75
➢The dashboard is devidedinto 4 zones: Device Information, Active Service Connections, WWH History and VPN History
6.1 Dashboard
Chapter 6 –Further Functionality
WWH History: Shows the WWH
connection of the router to the u-
link WWH Server. Red bar
represents no connection, while
green bar shows connection.
Can be used for troubleshooting
connection problems e.g. identify
fluctuating cellular connection or
regular disturbances from
firewalls.
On mouse-over the exact time of a
status change will be displayed.
The WWH history can be exported
as .csv file via “Export…”
VPN History: Shows the VPN
connection of the router to the u-
link VPN Server. The green bar
represents VPN connection.
On mouse-over the exact time of a
status change will be displayed.
The VPN history can be exported
as .csv file via “Export…”
Active service
connections:
Shows all users that
are currently
connected to the
router.
The history can be
displayed and
exported by clicking
“Show History…”.
Device Information:
Shows router
specific information
and offers the
possibility to show
the router event log.
The function “Show
event log…” is only
available on active
WWH connection
The router event log
will be deleted by
power-loss.

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 76
➢Action button “Show event log…” opens a popup which shows the eventlogof the router. The router eventlogwill be deleted after power-loss. It can be exported in a
.csv file
➢Action Button “Show History…” opens a popup which shows the history of service PC’s connected to the router. This informationcan be used to document service
accesses and e.g. to invoice an exact service fee.
6.1 Dashboard
Chapter 6 –Further Functionality

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 77
➢For all objects (Routers, User defined end devices, Groups and Locations) actions can be defined in the Device Management.
➢In section actions click on button “Add” to create a user-defined action
➢A popup will appear with an actions list. The action “Open a Web page (new Tab)” is listed. More actions may be added later.#
➢Klick on “Configure” to configure the action
➢With save the action will be saved and can now be used in the Webinterface
6.2 User-defined actions
Chapter 6 –Further Functionality
Name: The name for the action, that will be
shown in the service Desk e.g. Webinterface

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 78
➢As administrator you can create news for all users in this u-link system account.
➢To create news press “Add News” in the “News and Downloads” page
➢A popup with an html editor will open
6.3 News from your administrator
Chapter 6 –Further Functionality
Design: Write text or copy and paste images
in the editor. The editor will create html code
out of the formatted text.
HTML: Write direct html code, copy it from
another html editor or view/edit the html
code of the news created in “Design”.
Preview: Web-preview of the html code.
Visible for: Decide which user groups are
able to see your news.
Release your News

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 79
Chapter 7: Standard Functions -Further functionality in
Standard Version
1 –Firmware Management
2 –China Access
3 –Password Policy
4 –Access Rights
5 –Eventlog
6 –Templates
Chapter 7 –Standard-Version Functions

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 80
➢In the menu Firmware Management there is a list of all routers that were created in the portal.
➢Only Routers with Internet Connection (as indicated by ) can be updated or selected for update.
➢Information about Product, Serial No, Version and Build of the router are displayed (status of last WWH connection) and emptyifrouter wasn’t connected before.
➢Update multiple selected routers by selecting them and click any “Schedule Update”, if update method is restricted, these routers will not be selectable any more.
7.1 Managing Firmware of connected Routers
Select one or multiple
Routers for update
Logo shows, whether Router has
connection to the server or not
Name of the Router
Router type
Unique Serial Number of
device
Current Firmware version
and Build number
Shows update history for
the device
Perform an update
Filter allows easy
navigation with many
routers
Displays further
information
Chapter 7 –Standard-Version Functions
Clicking on column
header will sort the list
according to this attribute

V1.5.3 / Jan, 2022
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 81
➢With the filter function it is possible to search for specific devices
➢The History function shows all Firmware related information with timestamps
➢The Schedule Update function is for updating.
➢Select which Firmware should be the new one. All Firmwares
available are checked by Weidmüller and are located at Weidmüller
Servers
7.1 Managing Firmware of connected Routers
Deactivate Filter
Deletes current Filter
rules
With klick on filter
symbol, advanced
settings for filtering can
be chosen
By clicking on
History, all
firmwareupdate
information
regarding the
specific device will
be displayed
By clicking on Schedule Update, a
Firmware update can be performed, a
new window will open
Transmission of firmware over
WWH, if actual firmware does
not support update via WWH,
the update can be performed
using a VPN connection
Choose new Firmware Version
and Build
Manual: Immediate update
Schedule: Update on defined
Timeslot
In case of Update via
VPN, the admin
password of the router
is needed
Chapter 7 –Standard-Version Functions
Attention! Scheduled time will
be Server time (Winter UTC+1,
Summer UTC+2)

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 82
➢After scheduling an update, information about the update are displayed in the Firmware Management window.
➢With “Change” the planned updates can be edited or deleted.
➢When more than 10 devices per u-link account (including all users) are scheduled at the same, they will be bunched together in
groups of 10, which will be updated successively. E.g. 27 devices are updated: First devices 1-10, then 11-20, then 21-27 are
updated.
7.1 Managing Firmware of connected Routers
Date and time, when
update will be performed
New build number after
update
New Firmware Version
after update
Possibility to change or
cancel update
Chapter 7 –Standard-Version Functions

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 83
➢After start of an update the current status will be displayed.
➢The status will be updated by reloading of the website/the table which is every 5 seconds.
➢After successful update the router will restart. The restarting of the router might take up to 60 seconds
7.1 Managing Firmware of connected Routers
Status of the update, will be renewed
every 5 seconds
After sucessfulor disrupted update the
status will be deleted after 10 minutes.
The final status can then be found in
the History
Chapter 7 –Standard-Version Functions

V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 84
➢China prevents cross-border VPN connections with the so called Great China Firewall. As soon as VPN tunnels are detected
they are shut down immediately, which also prevents remote access solutions to machines.
➢As the u-link servers are located in Europe, a cross border connection is every connection with:
➢u-link VPN Client in China
➢Router in China
➢Both Router and Client in China
➢With selecting “China” as Location the VPN tunnel will be routed via a server located in China and use a certified secure
connection between Chinese and European servers
➢The Server for single routers can be set in the Device Management by selecting the device in Device Configuration
➢The Server for u-link Clients (Service PC’s) can be set for the specific user in the User Profile
7.2 China Access
Settings for u-link VPN
Client (Service PC)
Settings for Routers
Chapter 7 –Standard-Version Functions

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 85
➢To ensure the security of the user accounts, a password policy can be set for the whole account
➢In the password policy the settings for minimum amount of:
➢Characters (Password Length)
➢Symbols
➢Uppercase characters
➢Lowercase Characters
➢Number Characters
Can be set. The minimum is set to 8 at password length and 0 for all other requirements
➢The new requirements will come into effect when a user changes his password and for all new created users
➢To have a permanently renew of passwords, a password Change Cycle can be set. The value can be between 0 and 999 days, in which 0 disables the change
cycle.
➢After expiration of the password, the users will be forced at the next login
to change their password.
➢The last used password will not be allowed to be the new one.
➢To force the new established policy to all users directly, use a Change Cycle
of 1 day and afterwards set the Change Cycle to the desired amount of days
7.3 Password Policy
Chapter 7 –Standard-Version Functions
V1.5.3 / Jan, 2022

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 86
➢Access rights can be set for every object in the Device Topology.
➢It is a whitelistof groups, where at non-router objects the visibility and at router objects the visibility and accessibility of IP, Port and Protocol can be set
➢By creating a new device, all user groups will get visibility and access to all IP’s, Ports and all Protocols marked with “*”
➢Settings:
➢Removing a group means that all users of that group won’t be able to see this object in their device topology anymore
➢Specifying an IP address (range) –all users of the group can connect to the subnet, but have access to defined IP address (ranges) only
➢Specifying Port (range) -all users of the group can connect to the subnet, but have access to defined Port (ranges) only
➢Specifying Protocols -all users of the group can connect to the subnet, but can use defined Protocols only
➢The entries of allowed IP-addresses, Ports and Protocols are handled additivelywithin the list and over several user groups.
➢To ensure that the settings come into effect, please reconnect the u-link VPN clients
7.4 Access Rights
Chapter 7 –Standard-Version Functions
V1.5.3 / Jan, 2022

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 87
Examples for several entries:
Line 1 includes Line 2, so that all IP addresses with all Ports and Protocols are allowed.
Line 1 allows access to all IP addresses with all Ports and TCP Protocol.
Line 2 allows additionallyaccess to IP 192.168.1.110 on Port 80 with UDP Protocol.
Examples for several groups (User is member on User group A, andUser group B):
User group A:
User groupB:
As at the previous example, the user is allowed to access all IP addresses on all Ports with
TCP Protocol by rights of User group A. As he is also member of User group B he can
additionallyaccess the IP 192.168.1.110 on Port 80 with UDP Protocol.
7.4 Access Rights
Chapter 7 –Standard-Version Functions
IP address list Ports Protocols
* * *
192.168.1.110 80 UDP
IP address list Ports Protocols
* * TCP
192.168.1.110 80 UDP
IP address list Ports Protocols
* * TCP
IP address list Ports Protocols
192.168.1.110 80 UDP
V1.5.3 / Jan, 2022

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 88
➢If a user has restricted access to the local network of a router, the information will be displayed in the service desk as “Accessible network (restricted)”
➢To get more information the user can click at the info button. A window will turn up which will show the access settings.
7.4 Access Rights
Chapter 7 –Standard-Version Functions
V1.5.3 / Jan, 2022

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 89
➢The Eventlogdisplays all actions that happen in the portal.
➢The Date for the Eventlogwill be the Servertime, which is (Winter UTC+1, Summer UTC+2).
➢The eventlog can be filtered to show a specific timeframe, category level or messages with a specific text.
➢The export-function will generate an .csv file with all entries fitting to actual filter rules
7.5 Eventlog
Chapter 7 –Standard-Version Functions
V1.5.3 / Jan, 2022

Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 90
➢For managing several similar remote IP networks, there it the possibility to create templates
➢To create a template, right klick on a Location/Folder/Router/User defined object in the Device Topology in menu Device Management and klick “Create Template”
➢Now a copy of all devices that are below the selected one in the topology will be created in the menu “Add Device/Object”
➢This whole group can now be added to the device topology by drag and drop again.
➢A template can not include more than 1 Router object
7.6 Templates
Chapter 7 –Standard-Version Functions
V1.5.3 / Jan, 2022
Error when creating a
template including
multiple routers

Appendix
1–Registration of Router to u-link failed (How to solve)
2–General support in case of Router problem issues
3–Functional diagram of u-link
4–Connection requirements of u-link VPN clients (Service PC / Router)
5–Activating / de-activating Router VPN connection by digital input
6–Technical u-link support
V1.5.3 / Jan, 2022 Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 91
Appendix

Page 92
Following issues can cause this error:
Error 1 -A wrong activation code was entered.
➢Please verify the activation code. If entered
wrong repeat the registration process.
Error 2 -Values Date / Time of the Router are
not set correctly.
➢Gotomenu ‘General settings →Date&Time’,
enter values for Date/Time manually and
enable checkbox NTP synchronization. Then
click button ‘Apply settings’. Then repeat the
registration process.
Appendix 1 –Registration of Router to u-link failed (How to solve)
Router Web interface
(Menu u-link / Tab Registration)
Status: Registration failed!
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Failure message 1:Registration failed -Check registration code, ensure that status of activation code in u-link
portal is set to ‘not used’ or ‘Released for additional activation’
V1.5.3 / Jan, 2022
A1 -Router registrationfailed

Page 93
Error 3 -The entered activation code already has
been used either for registering another
Router or you have tried to register this
Router a second time.
A registration / activation code may be used only one time
for registering a Router. The activation code is used to
dedicate uniquely a physical Router to a configured u-link
Router object (u-link Device Management). In order to avoid
an un-controlled multiple use of the same activation code an
additional use has to be released before re-registering.
Appendix 1 –Registration of Router to u-link failed (How to solve)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
u-link Web portal
Menu Device Management
Normally there are only 2 use cases for additional use of an activation code:
1.A defective u-link Router has to be replaced by a new device (manually
configured like the defective Router).
2.The configuration of an u-link Router was overwritten (eg. un-registered) or
a reset to factory defaults has been done.
How to release for additional use:
➢Logon-on to the u-link Web portal.
➢Open menu ‘Device Management’ and highlight the Router object.
➢In section ‘Device Configuration’ click icon ‘Edit ‘ of parameter ‘Activation
code’.
➢Then enable checkbox ‘Release for additional activation’.
➢Now try again to register the Router.
Note: The checkbox only can be set if the status is ‘In Use’, a new not
assigned activation code displays the status ‘Not used’.
V1.5.3 / Jan, 2022
A1 -Router registrationfailed
Failure message 1 continued

Page 94
1.Investigate generally the Internet
accessibility in terms of configured
network parameters:
➢Check via menu ‘Diagnostics →Ping test’ if
an Internet IP (eg. 8.8.8.8) is accessible.
➢Check via menu ‘Diagnostics →Ping test’ if
an Internet device via DNS name (eg.
www.google.com) is accessible.
➢Please read Chapter 4.6 (Setup of a remote
access scenario / Configuration Router).
2.Router Internet access is blocked by
company-based Firewall rules
➢Please read Appendix (Required Protocols
and ports for u-link).
➢Clarify with IT department to allow the
outgoing u-link communication based on the
required protocols / ports (see Appendix A4).
Appendix 1 –Registration of Router to u-link failed (How to solve)
Router Web interface
(Menu u-link / Tab Registration)
Status: Registration failed!
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Note:
If during the registration process -before
displaying the final status ‘Registration failed’
–only the status “getting CA certificate’ is
displayed in the meantime (and not the status
‘enrolling certificate’) then this is an Indication
that a corporate Firewall or Proxy server is
blocking the registration process.
Please press button ‘Reload‘ repeatedlyto
monitorthetemporarystatusmessages.
When the registration process is started via
button ‘Register’ please click button‚Reload‘
repeatedlytoupdate thestatus.
3.Router Internet access is passing a company-based
Proxy server which requires an authentication to
establish an Internet connection
➢Configure in menu ‘Network →HTTP proxy’ the
required settings (provided by IT department).
➢Enable checkbox “Use system wide HTTP proxy” in
menu u-link →Configuration.
V1.5.3 / Jan, 2022
Error message
A1 -Router registrationfailed
Failure message 2:Registration failed -Network error (Check network and proxy settings)

Page 95
If any problems in terms of u-link connectivity
or other Router features require support from
Weidmüllerplease proceed as described
below.
➢Gotomenu ‘System →Backup settings’
➢Click button ‘Download settings’ to export the
configured Router settings (a file with
extension .cf2) will be created.
Note:
Only a saved configuration will be exported into
a backup file. If you have changed and applied
Router parameters but still not savedthen you
need to save the configuration before creating
the backup file.
➢Send the cf2-file to the Weidmueller support
▪The u-link support department then will
analyze the issue and contact you to solve
the problem.
Appendix 2 –General support in case of Router problem issues
Router Web interface
Menu System →Backup settings
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
A2 -General Router supportbyWeidmüller
V1.5.3 / Jan,2022

Page 96
Appendix 3 –Functional diagram of u-link
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
A3 -Functional diagram of involved u-link components
V1.5.3 / Jan,2022
Service PC
Router

Page 97
Appendix 4 –Internet connection requirements of u-link VPN clients (Service PC / Router)
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
A4 -Overview of used u-link connection parameters
V1.5.3 / Jan,2022
URL Port IP Comment
u-link.weidmueller.com
www.u-link.weidmueller.com
TCP 80
TCP 443
13.69.30.109 Registration Server
wwh1-we.aw-cp.de TCP 443 13.81.4.92 AZURE
wwh1-ne.aw-cp.de TCP 443 52.169.107.229 FallbackServer
vpn1-we.aw-cp.de TCP 443 52.166.202.111 AZURE
vpn1-ne.aw-cp.de TCP 443 52.169.106.31 Fallback Server
- TCP 443 52.236.154.224/28 Für zukünftige Nutzung
- TCP 443 52.155.177.96/28 Für zukünftige Nutzung
vpn3-we.aw-cp.de TCP 443 51.136.30.13 Für neue Kunden ab 25.8. wird dieser Server
verwendet. (nicht mehr vpn1-we!)
vpn1-wu.aw-cp.de TCP 443 20.51.82.8 (aus Block 20.51.82.8/30) West USA
vpn2-wu.aw-cp.de TCP 443 20.51.82.9 (aus Block 20.51.82.8/30) West USA
vpn4-we.aw-cp.de TCP 443 51.144.182.20 Für zukünftige Nutzung
vpn3-ne.aw-cp.de TCP 443 40.115.121.76 Für zukünftige Nutzung
vpn4-ne.aw-cp.de TCP 443 40.115.121.69 Für zukünftige Nutzung
Mandatory Firewall Settings

V1.5.3 / Jan,2022 Copyright © 2021 Weidmüller Interface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited. Page 98
•All connection types are outgoing
•Please ensure that also DNS (Port 53 TCP/UDP) and NTP
(Port 123 TCP/UDP) are allowed by the firewall.
•Please keep the device firmware and PC client version up-to-
date
Hints
- TCP 443 101.132.149.212 VPN Enpunkt in China -Kunden mit WE1 Server
- TCP 443 47.101.209.169 VPN Enpunkt in China -Kunden mit WE2 Server
vpn1-eu.aw-cp.de TCP 443 52.138.108.32 Für zukünftige Nutzung (aus Block
52.138.108.32/30) East USA
vpn2-eu.aw-cp.de TCP 443 52.138.108.33 Für zukünftige Nutzung (aus Block
52.138.108.32/30) East USA
vpn1-sb.aw-cp.de TCP 443 191.233.23.32 Für zukünftige Nutzung (aus Block
191.233.23.32/30) South Brazil
vpn2-sb.aw-cp.de TCP 443 191.233.23.33 Für zukünftige Nutzung (aus Block
191.233.23.32/30) South Brazil
vpn1-ca.aw-cp.de TCP 443 20.38.186.0 Für zukünftige Nutzung (aus Block 20.38.186.0/30)
Central Australia
vpn2-ca.aw-cp.de TCP 443 20.38.186.1 Für zukünftige Nutzung (aus Block 20.38.186.0/30)
Central Australia
vpn1-sea.aw-cp.de TCP 443 40.119.243.192 Für zukünftige Nutzung (aus Block
40.119.243.192/30) South East Asia
vpn2-sea.aw-cp.de TCP 443 40.119.243.193 Für zukünftige Nutzung (aus Block
40.119.243.192/30) South East Asia
N/A TCP 443 52.236.154.224/28 Backup IPs
N/A TCP 443 52.155.177.96/28 Backup IPs

Page 99
Appendix 5 –Activating / de-activating Router VPN connection by digital input
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
A5 -Activating / de-activating a u-link VPN tunnel via 24 VDC digital input
Start/Stop VPN tunnel:
➢Establish VPN tunnel by connecting Pin 2 (VPN initiate) to 24 VDC and
Pin 4 (GND) to ground of power supply.
➢Deactivate VPN tunnel by removing 24 VDC from Pin 2.
▪The status of the u-link VPN tunnel (on-/offline) is signalized by Pin 3
(Digital output “VPN active”). For output signalizing you need to
connect Pin 1 (VCC) to 24 VDC.
Router Web interface
(Menu u-link, Tab Configuration)
Must be set to ‘u-link’ for signalizing an
active VPN tunnel by digital output ‘VPN
active’ enabled (default value).
Checkbox ‘Initiation by digital input’ must
be enabled to establish a VPN tunnel by
digital input ‘VPN init’ (default value).
Must be set to ‘Active’ (default value).
V1.5.3 / Jan, 2022

Page 100
Appendix 6 –How to change IP address/netmaskof Router LAN port via u-link
VPN connection
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
A6 -Change LAN IP address/netmaskof a remote Router via u-link VPN connection
Situation (Example):
▪Current IP configuration of remote Router:
LAN port IP/Subnet: 192.168.1.110 / 255.255.255.0
WAN port IP/Subnet: 192.168.99.206 / 255.255.255.0
Requirement:
▪The LAN port IP/Subnetshall be changed via u-link to:
IP address: 192.168.50.254
Subnet mask: 255.255.255.0
Solution:
➢Connect to the remote Router via u-link.
▪The u-link VPN client (PC) now has got route
settings how to access the IP networks
192.168.1.0/24 (Router LAN) and 192.168.99.0/24
(Router WAN). See upper screenshot.
▪The Routers Web interface can be accessed via
LAN IP, WAN IP or via the Routers u-link VPN IP
(see upper screenshot). Due to the fact thatwe
want to change the LAN-IP we may not use the
current LAN-IP for accessing the Web interface
but we can use the Router VPN IP.
➢Open the Routers Web interface by using the
Routers VPN IP.
➢Gotomenu IP configuration.
➢Change IP address data of LAN port.
➢Click button ‘Apply settings’.
▪Now the new LAN-IP address is active and the
connected devices at Routers LAN port must be
adapted to the new IP range.
➢Save the configuration (Menu System →Save).
Router VPN IP
Accessible networks at
Routers LAN/WAN ports
V1.5.3 / Jan,2022
Screenshot shows the already set
new IP address at LAN port.
Web access to Router via the Router’s u-link VPN IP
Note about provided accessible networks:
If the Router is connected to Internet via DHCP-enabled WAN portthen the
WAN network will not providedas accessible network (only the LAN side).
If the Router is connected to Internet via WAN port with static IP addressthen
both network sides (LAN and WAN) are provided as accessible networks.

Page 101Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
A6 -Change LAN IP address/netmaskof a remote Router via u-link VPN connection
Note:
The connected PC still has the routing entries to
previous Router LAN and WAN IP networks
192.168.1.0/24 and 192.168.99.0/24.
To update the PCs routing table do following:
➢Disconnect the PC from the remote Router.
➢Disconnect the Router VPN connection to u-link.
▪Wait until the Router icon changes to this
symbol:
➢Connect the Router again to u-link.
▪Wait until the Router icon changes to this
symbol:
➢Finally re-connect the PC to the remote Router.
▪As result the PC’s routing table should be
updated and the new accessible networks
192.168.50.0/24 and 192.168.99.0/24 should
be displayed in the connection status of the
Service desk.
New accessible networks at
Routers LAN/WAN ports
V1.5.3 / Jan, 2022
Appendix 6 –How to change IP address/netmaskof Router LAN port via u-link
VPN connection

Page 102
Appendix 8 –Technical u-link support
Copyright © 2021 WeidmüllerInterface GmbH & Co. / All rights reserved. Reproduction without permission is prohibited.
Foranytechnicalissuesorsupport requestsin termsoftheu-link Remote Access Service
pleasecontact your local sales representative: https://www.weidmueller.com/countries
V1.5.3 / Jan, 2022
A7 –Technical customer support
Tags